PT-2018-19279 · Debian · Dpkg

Publicado 2018-08-23 · Atualizado 2018-08-23

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions dpkg (affected versions not specified)

Description A flaw was found in dpkg that allows an attacker to perform a directory traversal by extracting a crafted .deb file with a /DEBIAN symlink using dpkg-deb --raw-extract.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2018-0352

Produtos afetados

Dpkg

Referências · 5

• https://osv.dev/vulnerability/MGASA-2018-0352 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/64MG54Q347INMLYDW47XBYZQ3BQCXEXC · Aviso do Fabricante
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879982 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=23411 · Nota
• https://advisories.mageia.org/MGASA-2018-0352.html · Nota de Segurança